How to manage a MongoDB® Database Instance user

Users can connect to a database and access its data.

Before you startLink to this anchor

To complete the actions presented below, you must have:

• A Scaleway account logged into the console
• Owner status or IAM permissions allowing you to perform actions in the intended Organization
• A valid API key
• A MongoDB® Database Instance

How to change the password of your userLink to this anchor

1. Click MongoDB® Databases under Databases on the side menu. A list of your Database Instances displays.
2. Click the database name or «See more Icon» > More info to access the Database Instance information page.
3. Go to the Users tab. Your default user displays.
4. Click Change password to do so. A pop-up appears.
5. Enter your new password and confirm.

How to create multi-users via the APILink to this anchor

When you create your MongoDB® Database Instance, the first user is created by default and has admin rights.

You can create more users and grant them pre-set roles via the Scaleway Managed MongoDB® API.

How to create a userLink to this anchor

1. Edit the POST request payload you will use to create your user. Replace the values of each parameter with your values of choice following the parameter descriptions below.

     {
       "name": "<username>",
       "password": "<password>",
     }
   

   Parameter	Description
   name	Set a name for the database user.
   password	Set a password for the database user.

2. Run the following command to create a user. Make sure you include the payload you edited in the previous step. {instance_id} corresponds to the UUID of the Managed MongoDB®.

   curl -X POST \
     -H "X-Auth-Token: $SCW_SECRET_KEY" \
     -H "Content-Type: application/json" \
     -d '{
       "name": "<username>",
       "password": "<password>",
         }' \
     "https://api.scaleway.com/mongodb/v1alpha1/regions/$SCW_REGION/par/instances/{instance_id}/users"
   

   You should get a response like the following:

   {
     "name": "<username>",
     "password": "<password>",
       "roles": [
         {
           "role": "read_write",
           "any_database": true
         },
         {
           "role": "db_admin",
           "any_database": true
         },
         {
           "role": "sync",
           "any_database": true
         }
       ]
   }
   

All users you create will have the read_write, db_admin and sync roles on all databases by default.

You can follow the steps below to update a user’s role(s) to the one(s) of your choice.

How to apply a role to a userLink to this anchor

1. Edit the POST request payload you will use to update the user role. Replace the values of each parameter with your values of choice following the parameter descriptions below.

   In this example, we define a single read_write role for the user. This role applies only in the example-db database.

   Tip

   To grant the user this role in all databases, you can set any_database to true.

   {
     "name": "<username>",
     "roles": [
       {
         "role": "read_write",
         "database": "example-db",
         "any_database": false
       }
     ]
   }
   

   Role	Description
   read	Read privileges on all non-system collections and the system.js collection. Refer to the official MongoDB® documentation for an extensive list of the privileges granted to this role.
   read_write	Read and write privileges on all non-system collections and the system.js collection. Refer to the official MongoDB® documentation for an extensive list of the privileges granted to this role.
   db_admin	Privileges to perform administrative tasks on the database, such as schema-related tasks, indexing, and gathering statistics. This role does not grant privileges for user and role management. Refer to the official MongoDB® documentation for an extensive list of the privileges granted to this role.
   sync	Role that aggregates three MongoDB roles:
   	clusterMonitor - Read-only access to monitoring tools. Refer to the official MongoDB® documentation for an extensive list of the privileges granted to this role.
   	backup - Grants the minimal privileges needed to back up data. Refer to the official MongoDB® documentation for an extensive list of the privileges granted to this role.
   	restore - Grants the privileges needed to restore data from backups. Refer to the official MongoDB® documentation for an extensive list of the privileges granted to this role.

2. Run the following command to apply a new role to the user. Make sure you include the payload you edited in the previous step and that you replace the parameters in the call with your information. {instance_id} corresponds to the UUID of the Managed MongoDB®.

   curl -X PUT \
     -H "X-Auth-Token: $SCW_SECRET_KEY" \
     -H "Content-Type: application/json" \
     -d '{
       "name": "<username>",
       "roles": [
         {
           "role": "read_write",
           "database": "<name_of_database>"
           "any_database": false
         }
       ]
     }' \
     "https://api.scaleway.com/mongodb/v1alpha1/regions/$SCW_REGION/instances/{instance_id}/roles"
   

   If the call was successful, you will get the payload with the new role(s) as a response.

   Note

   Assigning roles upon user creation will be possible by the second half of 2025. Refer to the Scaleway Changelog to keep up with the latest Managed MongoDB® updates.